home

osd.exe

On-Screen Display Application

Chicony Electronics Co., Ltd.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘aOSD’. This is installed with ThinkPad Compact Keyboard with TrackPoint driver.
Publisher:
Lenovo  (signed by Chicony Electronics Co., Ltd.)

Product:
On-Screen Display Application

Version:
1, 1, 0, 25

MD5:
efc6880fe1013578c5fcf8230a6e2666

SHA-1:
639a7932c093c25c688112ba47d54a52b574edf9

SHA-256:
85ecb25fc922a1661532bd2e7f8625daad2145a6e28a501992f1d653087003fd

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 8:20:55 AM UTC  (today)

File size:
118.3 KB (121,168 bytes)

Product version:
1, 1, 0, 25

Copyright:
Copyright (C) 2013

Original file name:
LenovoOSD201211.exe

File type:
Executable application (Win32 EXE)

Language:
Taiwanese

Common path:
C:\Program Files\lenovo\thinkpad compact keyboard with trackpoint driver\osd.exe

Digital Signature
Signed by:
Chicony Electronics Co., Ltd.

Authority:
VeriSign, Inc.

Valid from:
10/2/2012 9:00:00 PM

Valid to:
10/2/2015 8:59:59 PM

Subject:
CN="Chicony Electronics Co., Ltd.", OU=Keyboard, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Chicony Electronics Co., Ltd.", L=Taipei, S=Taiwan, C=TW

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7A329B53E3FBF61A1B815EFF620FDC85

File PE Metadata
Compilation timestamp:
4/19/2013 8:36:09 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
1536:MNR7YOBOgbe270qbRqMRq4slRJ32khopRPvLtLVBVHwXEetKQOVX:iAtwbRnhseBLVBVHcEetKQOVX

Entry address:
0x5F4B

Entry point:
E8, 2A, 42, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 68, A5, 41, 00, 89, 0D, 64, A5, 41, 00, 89, 15, 60, A5, 41, 00, 89, 1D, 5C, A5, 41, 00, 89, 35, 58, A5, 41, 00, 89, 3D, 54, A5, 41, 00, 66, 8C, 15, 80, A5, 41, 00, 66, 8C, 0D, 74, A5, 41, 00, 66, 8C, 1D, 50, A5, 41, 00, 66, 8C, 05, 4C, A5, 41, 00, 66, 8C, 25, 48, A5, 41, 00, 66, 8C, 2D, 44, A5, 41, 00, 9C, 8F, 05, 78, A5, 41, 00, 8B, 45, 00, A3, 6C, A5, 41, 00, 8B, 45, 04, A3, 70, A5, 41, 00, 8D, 45, 08, A3, 7C, A5, 41, 00, 8B...
 
[+]

Code size:
76 KB (77,824 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
aOSD

Command:
C:\Program Files\lenovo\thinkpad compact keyboard with trackpoint driver\osd.exe


The file osd.exe has been discovered within the following program.

 
Powered by Should I Remove It?

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.